use oauth to authenticate users
use api to load users
users and groups